PartnerNOC

Have you tested this manually or have they given you the commands they are using to test? If the domain is not hosted on your server, it should not accept it or send it out unless you are authenticated.